Jordan Windows Telnet Server 1.0/1.2 Username Stack Based Buffer Overrun Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/9316/info Jordan Windows Telnet Server has been reported prone to a remote buffer overrun vulnerability. The issue has been reported to present itself when a username of excessive length is supplied to the Telnet server...

TCP Chat (TCPX) 1.0 - Denial of Service Exploit

No description provided by source. / TCP ChatTCPX DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Tested on Windows2000 SP4 Info: infamous.2hell.com / [email protected] / include string.h...

FSFDT v3.000 d9 - (HELP) Remote Buffer Overflow Exploit

No description provided by source. $ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321...

Borland CaliberRM StarTeam Multicast Service Buffer Overflow

No description provided by source. $Id: borlandstarteam.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Helix Server 11.0.1 - Remote Heap Overflow Exploit (win2k SP4)

No description provided by source. /usr/bin/python Remote exploit for the vulnerability in Helix server v11.0.1 as described at http://gleg.net/helix.txt The exploit spawns a shell on TCP port 4444 and connects to it. At the time of overflow we control EAX which is used in a call as follows...

Ipswitch WhatsUp Gold 7.0/8.0 Notification Instance Name Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11109/info The Ipswitch WhatsUp Gold web interface is prone to a remotely exploitable buffer overflow vulnerability. This may be exploited by authenticated users of the interface to execute arbitrary code in the context o...

NetNote Server <= 2.2 build 230 - Crafted String DoS Exploit

No description provided by source. / NetNote Server v2.2 build 230, crafted string vulnerability. Poc included crash the server. Full disclosure and poc exploit by class101 at DFind.kd-team.com & n3ws at EFnet 13 november 2004 ------------------ WHAT IS NETNOTE ------------------ Homepage -...

VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit

No description provided by source. / 0day Discovered by: InTeL Auther: InTeL Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: VCDGear is a program designed to allow a user to extract MPEG streams from C...

ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability

ESA-2014-024.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability EMC Identifier: ESA-2014-024 CVE Identifier: CVE-2014-2503 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected products: • E...

Windows SYSTEM Escalation Via KiTrap0D

This Metasploit module will create a new session with SYSTEM privileges via the KiTrap0D exploit by Tavis Ormandy. If the session in use is already elevated then the exploit will not run. The module relies on kitrap0d.x86.dll and is not supported on x64 editions of Windows. This module requires...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This module exploits a flaw in the nwfs.sys driver to overwrite data in kernel space. The corruption occurs while handling ioctl requests with code 0x1438BB, where a 0x00000009 dword is written to an arbitrary address. An entry within the HalDispatchTable is overwritten in order to execute...

SuSE 10 Security Update : Xen (ZYPP Patch Number 8359)

XEN received various security and bugfixes : - xen: Timer overflow DoS vulnerability XSA-20. CVE-2012-4535 - xen: Memory mapping failure DoS vulnerability XSA-22 The following additional bugs have beenfixed:. CVE-2012-4537 - L3: Xen BUG at ioapic.c:129 26102-x86-IOAPIC-legacy-not-first.patch...

CVE-2012-2280

The CVE-2012-2280 entry concerns a Cross frame scripting vulnerability in EMC RSA Authentication Manager 7.1 (before SP4 P14) and RSA SecurID Appliance 3.0 (before SP4 P14). The issue allows remote attackers to inject arbitrary web script/HTML via unspecified vectors due to improper frame handlin...

CVE-2012-2281

CVE-2012-2281 affects EMC RSA Access Manager Server 6.x (before 6.1 SP4) and RSA Access Manager Agent. The root cause is improper invalidation/validation of session tokens after a user logs out, which can let an attacker replay a valid session via unspecified vectors. The impact is that remote at...

Novell Client 4.91 SP4 - Local Privilege Escalation

Novell Client 4.91 SP4 - Local Privilege Escalation Novell Client 4.91 SP3/4 Privilege escalation exploit Download link: http://download.novell.com/Download?buildid=SyZ1G2ti7wU SecurityFocus: https://www.securityfocus.com/bid/27209/info CVE:...

Oracle Weblogic Apache Connector POST Request Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

CVE-2011-5058

The CVE-2011-5058 entry affects 3S CoDeSys 3.4 SP4 Patch 2: the CmbWebserver.dll in the Control service allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory with backslash characters in an HTTP GET request. This is the concrete vulnerab...

CVE-2011-5008

CVE-2011-5008 is an integer overflow in the GatewayService of 3S CoDeSys (versions affected: CoDeSys 2.3 and 3.4; patched in V3.5 and V2.3.9.32). A large size value in the packet header enables remote attackers to trigger a heap-based buffer overflow and potentially execute arbitrary code. Attack...

CVE-2011-5007

Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080...